On Thu, Jun 14, 2018 at 10:18:31AM -0700, David Miller wrote: > From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> > Date: Thu, 14 Jun 2018 16:19:34 +0200 > > > This patchset proposes a new fast forwarding path infrastructure > > that combines the GRO/GSO and the flowtable infrastructures. The > > idea is to add a hook at the GRO layer that is invoked before the > > standard GRO protocol offloads. This allows us to build custom > > packet chains that we can quickly pass in one go to the neighbour > > layer to define fast forwarding path for flows. > > We have full, complete, customizability of the packet path via XDP > and eBPF. > > XDP and eBPF supports everything necessary to accomplish that, > there are implementations of forwarding implementations in > the tree and elsewhere. > > And most importantly, XDP and eBPF are optimized in drivers and > offloaded to hardware. > > There really is no need for something like what you are proposing. I started with this last year because I wanted to improve the IPsec (and UDP) forwarding path. Batching packets at layer2 and send them directly to the output path seemed to be a good method to improve this. In particular, we need to do only one IPsec lookup for the whole packet chain. So it relaxes the pain from reomoving the IPsec flowcache a bit. It can be only a first step, but we need some improvements here as people start to complain about that. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
